Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa
File:                     bf04624b-2810-314d-8509-0a4c13e7ef1c.roa (raw, json)
Hash identifier:          qD5rW2UC0vjNVysrSDoGVL4KyXi4jj9VdVXN835B0XA=
Subject key identifier:   D9:D0:1A:31:66:3A:B3:A8:B2:97:2F:BB:D1:E8:14:18:F1:51:F1:4C
Certificate issuer:       /CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
Certificate serial:       010D0C9F4328584917DC3455565C9694D1B9DAC0
Authority key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     16801
IP address blocks:        151.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:34:55:56:5c:96:94:d1:b9:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=139df8a8-99ff-4b47-9505-4a45848b5931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:16:67:b6:ee:00:95:fe:b4:6e:d9:9d:93:
                    d3:52:9e:32:4e:8b:3b:be:74:00:08:7b:04:66:e6:
                    20:d2:b6:d5:04:24:6c:f3:37:e1:c3:a5:46:39:8a:
                    2b:bb:d0:5b:5c:f5:5b:c1:94:1e:bf:7c:79:29:b9:
                    67:91:b5:20:b1:a3:b4:c1:7c:5a:d4:a1:e9:26:c5:
                    23:00:9e:ee:88:fe:7c:79:5e:4a:c3:35:d2:ea:b8:
                    52:38:46:9d:8d:54:5e:51:04:f5:e6:cc:9f:ab:ff:
                    d0:cc:0c:0a:1b:79:3b:80:77:78:40:59:ac:13:a1:
                    a4:39:99:3c:16:e3:f9:d0:db:47:15:6c:8d:d1:b5:
                    c9:5d:7c:2b:19:27:4e:e6:93:a3:a5:35:e0:df:5f:
                    56:4e:7e:0c:53:eb:0f:d7:dd:ad:36:31:08:78:19:
                    22:e2:4c:4c:95:94:8b:08:2e:b5:3e:44:db:9a:17:
                    17:40:6b:7a:e7:ba:d3:44:ea:4b:cd:5c:85:e1:30:
                    27:56:30:ad:2b:c3:e8:01:5f:4b:38:3c:16:1c:93:
                    b8:80:81:cb:22:e8:ab:0b:50:fd:9d:0c:d8:d4:b2:
                    40:af:a1:1b:82:68:bb:75:b8:a7:fd:7c:51:18:08:
                    9c:e0:ff:68:56:97:83:e5:fd:59:67:c2:61:f7:09:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:1A:31:66:3A:B3:A8:B2:97:2F:BB:D1:E8:14:18:F1:51:F1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:13:01:d1:c0:cc:23:55:3a:3a:34:18:46:79:a1:a5:6e:
         5f:3f:e9:e8:0e:ba:11:c9:8e:c8:ec:73:2f:f8:4e:e5:5e:d3:
         56:96:1d:d0:1a:a4:4c:75:20:2b:a1:cf:97:a1:c3:f7:09:34:
         0d:bd:4b:f9:11:a9:e0:ce:5c:ae:db:f3:a4:31:d7:b1:f7:f3:
         2e:9d:e8:36:91:2c:4b:51:78:52:aa:0f:b8:b4:aa:78:ec:8b:
         e6:3a:5c:b1:b6:01:f8:32:23:c6:3b:24:c3:d0:13:8c:1c:3d:
         21:69:42:f3:40:a4:64:ba:d4:76:73:0f:9e:b7:73:e2:dd:84:
         d1:20:3c:c2:8f:af:9c:e1:1b:a4:df:88:fe:39:5c:14:1e:15:
         bf:e5:c5:f5:f3:02:c8:c2:7a:29:0c:d2:b9:38:88:25:91:fd:
         38:e4:c1:50:44:bf:db:d4:7c:2e:c3:bb:0b:65:9a:fc:e1:e5:
         b4:fa:66:62:77:e5:64:06:15:c7:9c:f5:8f:1d:c5:75:fc:aa:
         2d:a6:2e:6b:dc:c3:de:fa:d9:0c:84:60:ff:74:58:89:64:2d:
         45:c1:f8:71:02:2b:65:11:4e:34:41:6f:7c:f9:83:ba:43:ed:
         05:05:37:48:b5:9f:2e:ed:f1:71:8a:4f:44:ce:17:98:bd:db:
         8e:2b:ca:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:27 2025 by rpki-client